Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-15522 |
|
Path Traversal in path-traversal (CVE-2026-15522)
path traversal in path-traversal (CVE-2026-15522). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15523 |
|
Vulnerability in sqli (CVE-2026-15523)
vulnerability in sqli (CVE-2026-15523). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15520 |
|
Buffer Overflow in c (CVE-2026-15520)
vulnerability in c (CVE-2026-15520). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15518 |
|
Vulnerability in CVE-2026-15518 (CVE-2026-15518)
vulnerability in CVE-2026-15518 (CVE-2026-15518). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15516 |
|
Vulnerability in CVE-2026-15516 (CVE-2026-15516)
vulnerability in CVE-2026-15516 (CVE-2026-15516). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15512 |
|
Vulnerability in CVE-2026-15512 (CVE-2026-15512)
vulnerability in CVE-2026-15512 (CVE-2026-15512). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15505 |
|
Cross-Site Scripting (XSS) in CVE-2026-15505 (CVE-2026-15505)
cross-site scripting in CVE-2026-15505 (CVE-2026-15505). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10664 |
|
Out-of-Bounds Write in c (CVE-2026-10664)
out-of-bounds write in c (CVE-2026-10664). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10665 |
|
Out-of-Bounds Write in c (CVE-2026-10665)
out-of-bounds write in c (CVE-2026-10665). Data can be tampered with by attackers.
|
| CVE-2026-10666 |
|
Vulnerability in c (CVE-2026-10666)
vulnerability in c (CVE-2026-10666). Successful exploitation can lead to full system takeover.
|
| CVE-2026-10667 |
|
Use-After-Free in c (CVE-2026-10667)
vulnerability in c (CVE-2026-10667). Successful exploitation can lead to full system takeover.
|
| CVE-2026-10668 |
|
Vulnerability in c (CVE-2026-10668)
vulnerability in c (CVE-2026-10668). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10663 |
|
Use-After-Free in c (CVE-2026-10663)
vulnerability in c (CVE-2026-10663). Data can be tampered with by attackers.
|
| CVE-2026-15502 |
|
Vulnerability in sqli (CVE-2026-15502)
vulnerability in sqli (CVE-2026-15502). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-61875 |
|
Cross-Site Scripting (XSS) in CVE-2026-61875 (CVE-2026-61875)
cross-site scripting in CVE-2026-61875 (CVE-2026-61875). Successful exploitation can lead to full system takeover.
|
| CVE-2026-15498 |
|
Vulnerability in sqli (CVE-2026-15498)
vulnerability in sqli (CVE-2026-15498). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15495 |
|
Command Injection in CVE-2026-15495 (CVE-2026-15495)
command injection in CVE-2026-15495 (CVE-2026-15495). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15497 |
|
Vulnerability in CVE-2026-15497 (CVE-2026-15497)
vulnerability in CVE-2026-15497 (CVE-2026-15497). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15496 |
|
Command Injection in CVE-2026-15496 (CVE-2026-15496)
command injection in CVE-2026-15496 (CVE-2026-15496). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15492 |
|
Cross-Site Scripting (XSS) in CVE-2026-15492 (CVE-2026-15492)
cross-site scripting in CVE-2026-15492 (CVE-2026-15492). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15493 |
|
Cross-Site Scripting (XSS) in CVE-2026-15493 (CVE-2026-15493)
cross-site scripting in CVE-2026-15493 (CVE-2026-15493). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15494 |
|
Vulnerability in sqli (CVE-2026-15494)
vulnerability in sqli (CVE-2026-15494). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15490 |
|
Vulnerability in sqli (CVE-2026-15490)
vulnerability in sqli (CVE-2026-15490). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15488 |
|
Vulnerability in CVE-2026-15488 (CVE-2026-15488)
vulnerability in CVE-2026-15488 (CVE-2026-15488). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15489 |
|
Vulnerability in sqli (CVE-2026-15489)
vulnerability in sqli (CVE-2026-15489). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15482 |
|
Vulnerability in sqli (CVE-2026-15482)
vulnerability in sqli (CVE-2026-15482). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15478 |
|
Vulnerability in sqli (CVE-2026-15478)
vulnerability in sqli (CVE-2026-15478). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10660 |
|
Out-of-Bounds Write in c (CVE-2026-10660)
out-of-bounds write in c (CVE-2026-10660). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-61447 |
|
Code Injection in CVE-2026-61447 (CVE-2026-61447)
code injection in CVE-2026-61447 (CVE-2026-61447). Successful exploitation can lead to full system takeover.
|
| CVE-2026-61454 |
|
Information Disclosure in CVE-2026-61454 (CVE-2026-61454)
vulnerability in CVE-2026-61454 (CVE-2026-61454). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-56763 |
|
Vulnerability in hono (CVE-2026-56763)
vulnerability in hono (CVE-2026-56763). Risk of unauthorized operations or information disclosure. Exploitable via ``__proto__.x``. Mitigation: upgrade to `4.12.7` or later.
|
| CVE-2026-3576 |
|
Vulnerability in wordpress (CVE-2026-3576)
vulnerability in wordpress (CVE-2026-3576). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-2354 |
|
Unrestricted File Upload in wordpress (CVE-2026-2354)
vulnerability in wordpress (CVE-2026-2354). Successful exploitation can lead to full system takeover. Exploitable via ``wp_check_filetype_and_ext``.
|
| CVE-2026-13250 |
|
Vulnerability in wordpress (CVE-2026-13250)
vulnerability in wordpress (CVE-2026-13250). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-3367 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-3367)
cross-site scripting in wordpress (CVE-2026-3367). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15338 |
|
Vulnerability in wordpress (CVE-2026-15338)
vulnerability in wordpress (CVE-2026-15338). Successful exploitation can lead to full system takeover.
|
| CVE-2026-13353 |
|
Code Injection in wordpress (CVE-2026-13353)
code injection in wordpress (CVE-2026-13353). Successful exploitation can lead to full system takeover.
|
| CVE-2026-57584 |
|
Vulnerability in phalcon/cphalcon (CVE-2026-57584)
vulnerability in phalcon/cphalcon (CVE-2026-57584). Risk of unauthorized operations or information disclosure. Exploitable via ``URI_SOURCE_GET_URL``. Mitigation: upgrade to `5.15.0` or later.
|
| CVE-2026-55810 |
|
Vulnerability in drupal/plotly_js (CVE-2026-55810)
vulnerability in drupal/plotly_js (CVE-2026-55810). Confidential information can be exposed externally. Exploitable via ``plotly_js_graph``. Mitigation: upgrade to `3.0.2` or later.
|
| CVE-2026-54736 |
|
Vulnerability in phalcon/cphalcon (CVE-2026-54736)
vulnerability in phalcon/cphalcon (CVE-2026-54736). Risk of unauthorized operations or information disclosure. Exploitable via ``useSigning``. Mitigation: upgrade to `5.14.1` or later.
|
| CVE-2026-13039 |
|
Vulnerability in wordpress (CVE-2026-13039)
vulnerability in wordpress (CVE-2026-13039). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-57214 |
|
Cross-Site Scripting (XSS) in broadcom (CVE-2026-57214)
cross-site scripting in broadcom (CVE-2026-57214). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-57213 |
|
Cross-Site Scripting (XSS) in broadcom (CVE-2026-57213)
cross-site scripting in broadcom (CVE-2026-57213). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-55664 |
|
Information Disclosure in CVE-2026-55664 (CVE-2026-55664)
vulnerability in CVE-2026-55664 (CVE-2026-55664). Risk of unauthorized operations or information disclosure. Exploitable via `GET /forms`.
|
| CVE-2026-55659 |
|
Cross-Site Scripting (XSS) in CVE-2026-55659 (CVE-2026-55659)
cross-site scripting in CVE-2026-55659 (CVE-2026-55659). Confidential information can be exposed externally.
|
| CVE-2026-55665 |
|
Cross-Site Scripting (XSS) in CVE-2026-55665 (CVE-2026-55665)
cross-site scripting in CVE-2026-55665 (CVE-2026-55665). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-55213 |
|
Vulnerability in c (CVE-2026-55213)
vulnerability in c (CVE-2026-55213). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-54171 |
|
Vulnerability in excon (CVE-2026-54171)
vulnerability in excon (CVE-2026-54171). Confidential information can be exposed externally. Mitigation: upgrade to `1.5.0` or later.
|
| CVE-2026-54159 |
|
Vulnerability in prestashop/ps_facetedsearch (CVE-2026-54159)
vulnerability in prestashop/ps_facetedsearch (CVE-2026-54159). Successful exploitation can lead to full system takeover. Exploitable via ``ps_facetedsearch``. Mitigation: upgrade to `4.0.4` or later.
|
| CVE-2026-57156 |
|
Vulnerability in c (CVE-2026-57156)
vulnerability in c (CVE-2026-57156). Successful exploitation can lead to full system takeover.
|